Our servers are protected against the PHP security vulnerability disclosed in October. The update was installed on 21 October 2026. More about php2shell

Patch

Baron Samedit: CVE-2021-3156 in sudo

An off-by-one error in sudo that lets a local user become root through sudoedit.

Published in the NVD on 26/01/2021

CVE-2021-3156

CVSS 3.1: 7.8 (high) actively exploited

In the CISA catalogue of actively exploited vulnerabilities since 06/04/2022

Exploitation probability (EPSS, 01/11/2026): 99.962 %, percentile 99.976

What is Baron Samedit?

Baron Samedit is an off-by-one error in sudo that results in a heap-based buffer overflow. With sudoedit -s and a command-line argument that ends in a single backslash, a local user can gain root privileges.

The NVD rates it at CVSS 7.8, and CISA has listed it as actively exploited since 6 April 2022. The NVD lists sudo 1.8.2 to 1.8.31 and 1.9.0 to 1.9.5p1.

Affected and fixed versions

Sudo 1.9

Affected: 1.9.0 - 1.9.5p1

Fixed in 1.9.5p2

Sudo 1.8

Affected: 1.8.2 - 1.8.31

Fixed in 1.8.32

Status in Debian and Ubuntu

Debian 12: sudo

Fixed

Fixed from package version 1.9.5p1-1.1

Debian 13: sudo

Fixed

Fixed from package version 1.9.5p1-1.1

Ubuntu 18.04 LTS: sudo

Fixed

Fixed from package version 1.8.21p2-3ubuntu1.4

Ubuntu 20.04 LTS: sudo

Fixed

Fixed from package version 1.8.31-1ubuntu1.2

What to do

Update sudo to 1.9.5p2 or 1.8.32 or install the fixed package of your distribution.

Erseni Patch tells you when a new vulnerability affects exactly your version, and when your release branch loses its support. Add the program or package with your version and we check it right away.

Watch sudo (Debian 12)

Watch sudo (Ubuntu 24.04 LTS)

Already have an account? Log in and add sudo (Debian 12)